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Description 

BACKGROUND OF THE INVENTION 

[0001 ] The invention relates to a method of providing 
telecommunications services, wherein users are au- 
thenticated and authorized to a first service profile be- 
fore a user session starts, characterized in that the serv- 
ice profile is dynamically varied in the course of the ses- 
sion. 

[0002] More particularly, invention relates to a method 
of providing telecommunications services to authenti- 
cated users with flexible billing options such as prepaid 
or postpaid in realtime, near-realtime, or non-reiltime. 
The method applies to all telecommunications services, 
where users which are identified with a user-ID or any 
other unique identification are authenticated before the 
start of a user session in a way that allows to present a 
bill to the owner (subscriber) of the User-ID, which the 
subscriber will be obliged to pay under normal circum- 
stances (no repudiation). 

[0003] The following are examples of User-IDs : where 
the method applies. 

1) "Username" - in RADIUS Accounting Start Re- 
quest and RADIUS Accounting Stop Request Of In- 
ternet Protocol (IP) dial-in services and other Inter- 
net Access Services using the dial-in paradigm. It 
should be noted that for authentication an additional 
authentication token such as a password is required 
when authenticating using the standard RADIUS 
protocol (RADIUS = Remote Authentication Dial-in 
User Service) 

2) "IMS" - International Mobile Subscriber Identifi- 
cation. It should be noted that the proliferation of the 
"IMSI" by a mobile network implies the user has al- 
ready been pre-authenticated successfully, there- 
fore no separate password or other authentication 
token is required. 

3) "CLID" Calling Line Identification in the PSTN 
identifying who originated the telephone or online 
dialup call. Again, the CLID has already been pre- 
authenticated and it's presence in a call setup re- 
quest (such as an SS7 IAM - Initial Ad-ress Mes- 
sage) is therefore alone sufficient for authentication 

\ of the user. 

j [0004] If accounting or billing applies, then a "user 
| session!' may be defined as follows: The session starts 
\ vJhen tAc billing system is informed by a network ele- 

• mfe?£t, tfeat accounting (and thus real-ime billing) shall 
\ tateej ef fect for this user immi-diately (e,g. via a RADIUS 
i accounting request). Alternatively, if the network ele- 

* ment rjrovides an accurate time stamp, the session 
starts at the time of the time stamp. The session ends, 
when the billing system is informed by the network ele- 



ment, that accounting (and thus real-time billing) shall 
stop for this user immediately (e.g. via a RADIUS ac- 
counting stop request). Alternatively, if the network ele- 
ment provides an accurate time stamp, the session en- 

5 da at the time of the time stamp. It should be explicitly 
noted that a telephone call - including is considered to 
be a session in the context of this application. 
[0005] When a user subscribes to a telecommunica- 
tions service, a user-ID will be assigned and a user 

10 record will be stored in a user database, which will allow 
the service provider to store: the data required for pro- 
ducing the bill and to retrieve this data for billing purpos- 
es using the user-ID as key for efficiently accessing the 
database. 

15 [0006] The network element which originates the ac- 
counting start request at the beginning of the session 
and the accounting stop request at the end of the ses- 
sion is called Network Service Switch (NSS), The NSS 
sends an accoundng start request after the user has 

20 been successfully authenticated and has been author- 
ized with an (initial) service policy. The NSS forms the 
subscriber edge of an IP network and enforces the serv- 
ice policy that the user has subscribed to. Access to the 
NSS may be achieved through various telecommunica- 

25 tion systems, either over wireless access networks (e. 
g. UMTS, GPRS, GSM, CDMA, wireless LAN, satellite, 
etc), or over wireline networks (e.g. xDSL, ATM, cable 
networks, Frame Relay networks, IP based access net- 
works. Frame Relay, leased line (PDH or SDH), fibre 

30 networks, Ethernet networks, or the Public Switched 
Telephone Network (PSTN) via dial-methods). In case 
the access network is itself already IP based, standard 
tunneling protocols such as L2TP (Iayer2 tunnelling pro- 
tocol) or PPP over Ethernet, or GTP in UMTS or GRPS 

35 networks may be used to move the subscriber edge to 
the NSS (Network Service Switch). 
[0007] During user authentication, the user sends his 
user-ID and optionally also an authentication token such 
as a password to the NSS. In case the user has already 

40 been pe-authenticated in the access network (which 
could belong to the same or a different service provider), 
it may be sufficient for authentication that the user or the 
other service provider sends his user-ID). This would 
usually be sufficient, if the access network belongs to 

45 the same service provider or if an inkasso agreement 
existed between the service providers, that would allow 
the service provider to bill via the service provider of the 
access network, 

[0008] The NSS may have a policy to always success- 
50 fully autbenticate users with pre-authenticated user-IDs. 
For example, this is often the case in telephone net- 
works offering so-called open call by call services as 
available in Germany. Alternatively, the NSS may have 
a policy to only successfully authenticate pre-authonti- 
55 cated user-IDs which are also listed on a so-called white 
list provisioned by the service provider with the user-IDs 
of subscribers. For example this is the case for so-called 
closed call by call services offered by many German op- 
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erators only to users that have previously subscribed to 
the service with the alternate operator. 
[0009] Alternatively, die NSS may have a policy to not 
always successfully authenticate, rather authenticate 
the user only when in addition an authentication token 
is provided such as a password or one of the other ex- 
amples listed below, which can be checked using a local 
or remote user database, and the user will only be suc- 
cessfully authenticated, if the user-ID and authentica- 
tion token provided are fully matching (or at least suffi- 
ciently enough in case of biometric data based authen- 
tication tokens) with database entries for the user-ID 
and an associated authentication token (e.g. password, 
Secure-ID, biometric information identifying the user, 
such as data on the iris structure of the user's eyes, data 
on the user's fingerprint, data on the user's voice char- 
acteristics for automadc speaker recognition etc.). 
[0010] In traditional telecommunications networks, 
the userdaLabase was often local to the NSS - such as 
in case of the NSS being a traditional TDM voice switch. 
In modern telecommunications networks, the user da- 
tabase is often kept centrally and is not local to the NSS. 
Therefore, user authentication involves communication 
to a remote database. This communication may be gov- 
erned by standard protocols, such as most importantly 
the RADIUS protocol (Remote Access Dial In USCr 
Service) defined by the IETF (internet Engineering Task 
Force). While the RADIUS protocol well defines the so- 
called process of AAA (Authentication, Authorization 
and Accounting) between a RADIUS client (the NSS) 
and a RADIUS server (the application having access to 
the user database), it does not provide any means to 
invoke a re-authorization with a new service profile dur- 
ing a session. Until very recently there was not even a 
way to disconnect by inifia-cive of the database, only 
very recently has a functionality been added for a RA- 
DIUS Disconnect Request, which allows to implement 
more flexible prepaid solutions. 
[0011] Particularly, when offering IP Services, an ex- 
ample of an NSS is the applicant's "Shasta 5000 BSN", 
("BSN" stands for Broadband Service Node). The BSN 
is designed to be-located at the "subscriber edge" of a 
service provider offering IP services, at the strategic 
point where the subscriber meets the IP network of the 
service provider. On the BSN, IP-Services can be pro- 
visioned and enforced on a per-subscriber basis. Also, 
service profiles can be defined for individual users or 
classes of users, which will be assigned to a user after 
successful! authentication during a so-called authoriza- 
tion. Prior to this invention, service profiles have always 
been static throughout a user session of authenticated 
users. There have been applications for changing the 
service profile from an initial default profile in the context 
of cost effective DSL service deployment. This feature 
may be used to allow for self-provisioning in the context 
of initial service stubscrip-tion of DSL customers (when 
they connect for the first time the DSL modem pur- 
chased in a retail store). This is achieved by the NSS's 



capability to enforce a service profile that drops all other 
traffic except HTTP traffic to a certain IP adress repre- 
senting the server for initial sign up of the so-far unau- 
thenttcated users. Once the user has provided sufficient 

5 information that allows to authenticate him in that mo- 
ment (which will then be stored in a user database for 
future authentication purposes), the user will be author- 
ized forthe first time with a user selected service profile. 
It it therefore important to note, that prior to this inven- 

10 tion, no service provider has ever re-authorized an au- 
thenticated user with a different service profile, particu- 
larly not in the IP Services. 

[0012] For the services rendered during the session, 
the user will in most cases be billed on a time basis. This 

*5 means that the amount of money with which the user 
will be charged for the session depends upon how long 
the session has lasted. However, the price may also de- 
pend upon other criteria, for example, on the volume of 
data that have been sent to the user during the session. 

20 in any case, there will be one or more types of service 
units (e.g. time or volume) which each have a certain 
price given in any suitable currency. In a postpaid sys- 
tem, the value of the service units consumed by the user 
will be recorded on an account, and the user will be billed 

25 later on the basis of this account. On the other hand, 
prepaid systems are known in which the user is credited 
in advance a certain amount of money which must be 
paid either in advance or later, and the account of the 
user will then be decremented in accordance with the 

30 value of the service units being consumed. When the 
user fails to reload his account and the account be- 
comes depleted, the user will be disconnected from the 
network. 

[0013] It will be understood that the price that the user 
35 has to pay will depend upon the service profile to which 
the user has subscribed. The service profile is defined 
by a set of user service parameters which specify the 
so-called user service policy. This user service policy 
may encompass a variety of different aspects the most 
40 important of which are listed below: 

QoS policy: 

[0014] The policy governing the Quality of Service 
45 provided to the user. e.g. in terms of bandwidth provided 
or priority given to data from this user (for example re- 
garding the setting of precedence and drop priority in 
the TOS field (Type of Service) of IP packets to imple- 
ment differentiated services according to DiffServ 
so standards or regarding a guaranteed bandwidth availa- 
ble to the user. 

Accounting policy: 

55 [0015] The policy governing the way the accounting 
and billing is done, specifying among others the billed 
items (i.e. the service units, volume or time or other) on 
which billing is based, the accuracy of the bill (for exam- 
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pie, whether time is billed in minutes or seconds), the 
payment mode, prepaid or postpaid, postpaid payment 
ceiling, the applicable tariff, bill presentation policy (for 
example in real time in the browser or only when the 
user accesses a special website; further, whether only 
the current tariff is displayed or also the current state of 
the prepaid account or current accumulated amount of 
charges, e.g. for a monthly postpaid bill, recharging pol- 
icy (e.g. if recharging the prepaid account with credit 
card is possible), etc. 

Privacy/accountability policy: 

[0016] The policies governing, on the one hand, the 
extent of data collected on the user's behavior and the 
amount of user information visible to communication 
partners of the user, and, on the other hand, the extent 
of data collected to allow the user to challenge the cor- 
rectness of a bill. 

IP-Sevices Policy: 

[0017] The policy governing which IP services the us- 
er is allowed to use (for example: http for WWW, Voice 
over IP; FTP, Telnet, smtp, etc). 

Security policy: 

[0018] The policy governing the extent to which the 
user is protected by the service provider against security 
hazards, for example by network-based firewalls and 
the like or by encryption of user communication. 

Content policy: 

[0019] The policy governing which content and/or 
websites the user is allowed to access. 
[0020] Conventionally, these policies defined by the 
service profile are static at least throughout a session. 
Only in the exceptional case of so-called self-provision- 
ing systems, in which an unauthenticated user has the 
possibility to subscribe online, a newsubscriber is atfirst 
authorized to a restricted service profile which allows 
only to enter the necessary data for provisioning the 
service. Then, once the service profile has been speci- 
fied, this profile will be fixed for the session to start and 
for any future sessions of the same user. 

SUMMARY OF THE INVENTION 

[0021] It is on object of the invention to provide a 
method of providing telecommunications services, 
which offers more flexibility in adapting service profiles 
to the demands of users, service providers and other 
participants in the network. 

[0022] According to the invention, this object is 
achieved by a method in which the service profile is dy- 
namically varied in the course of the session after the 



logon procedure. 

[0023] Thus, once a user has been authenticated to 
a session, the user may easily switch to another service 
profile without having to leave the current session and 
5 to start a new session. As a result, one and the same 
session may be segmented into a plurality of sub-ses- 
sions to which different service profiles apply. The ben- 
efit for the user may be il lustrated by the following simple 
example: 

10 [0024] Imagine that the user has logged on to a rela- 
tively cheap or even cost-free service profile. In the 
course of the session using this profile, the user arrives 
at a website where a file with a very large data volume 
is offered for download. Since the current service profile 

is provides only a poor Quality of Service, e.g. a limited 
bandwidth and a low priority for the data packets to be 
transmitted, the download procedure would be unrea- 
sonably time-consuming. Now, the user may simply en- 
ter a command to upgrade the service profile to a more 

20 expensive profile which provides however a significantly 
higher QoS, so that the download procedure will be ac- 
celerated. After this, the user may choose to return to 
the cheaper mode in order to continue with "surfing" on 
the Internet. 

25 [0025] On the other hand, it is not only the user but 
also the service provider who may take the initiative to 
change the service profile. The service provider may 
use this feature among others for offering services that 
can at least partly be financed by more efficient adver- 

30 tising. 

[0026] Today, advertising on the Internet appears 
mainly in the form of banners which occupy only a small 
fraction of the web pages visible on the screen. Howev- 
er, since the users tend to ignore the advertising ban- 

35 ners and will focus on the main contents of the web pag- 
es or will rapidly click-on to another page, this kind of 
advertising is significantly less efficient than for example 
advertising on Free-TV channels, where the regular pro- 
gram is interrupted by advertising spots, so that the 

40 viewer is forced to watch the advertising spots, and his 
attention is not distracted by other contents. The inven- 
tion provides a tool with which this advertising model can 
easily be implemented on the Internet. To this end, an 
advertising break consisting of a predetermined se- 

45 quence of part-screen or full-screen advertisements 
and/or multimedia advertising spots is defined as a spe- 
cific service profile governing the full advertising break, 
or a predetermined sequence of service profiles where 
the sequence can be dynamically adapted. 

50 [0027] When the user has worked with his previous 
or default service profile for a certain time, the Internet 
Service Provider forcibly switches to the service profile 
"advertising break", so that the user is forced to watch 
the advertising before he can continue with his own 

55 service profile. The profile "advertising break" may also 
include interactive elements permitting the user to select 
advertising on a specific topic in which he is particularly 
interested. This is beneficial for the advertiser, because, 
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in this way, the potential clients can be targeted more 
precisely. In order to give an additional incentive for the 
user to deal with the advertising, the advertising break 
may also include games, prize-competitions and the 
like. Moreover, the service profile may permit links to the 
web pages of the companies in whose benefit the ad- 
vertising has been made, so that the user may directly 
respond to the advertising and may order the corre- 
sponding goods and services. 

[0028] It will be understood that the feature whether 
or not a service profile that has been selected by a user 
may be interrupted by an advertising break is again a 
feature which distinguishes service profiles from one an- 
other. Thus, the user may select a service profile which 
is relatively cheap but will be interrupted by advertising 
breaks from time to time, and when he becomes an- 
noyed by the advertising breaks, he may, within the 
same session, choose to switch to a more expensive 
profile in which advertising breaks are forbidden. 
[0029] In case of a profile billed on a time basis, the 
user may find advertising breaks more acceptable when 
the advertising break is configured as a cost-free profile, 
and a corresponding message on the screen may ad- 
vise the user that he will not be billed for the time he is 
watching the advertising spots. The user may even be 
rewarded for watching the advertisement by specifying 
in the service profile "advertising break" that the prepaid 
account of the user is not decremented, but, instead, is 
incremented for each minute or second he is watching 
the advertisement. Then, it may also be advantageous 
if the user has the option to switch to an "advertising 
break" profile voluntarily, in order to increase his ac- 
count. 

[0030] In an existing network system, the method ac- 
cording to the invention may be implemented by install- 
ing, on behalf of the service provider, a piece of software 
which is called Session Manager Application (SMA) 
which ties together the authentication and authorization 
software, the user data base and the software control- 
ling the selection of pre-configured service profiles or 
the dynamic provisioning of service profiles in the Net- 
work Service Switches. When the change from one 
service profile to another can be initiated by the user, 
the system will also include a "Content and Policy Se- 
lection Portal" (PSP) for handling the user instructions 
by which the service profile is changed. 
[0031] Alternatively, a "Business to Subscriber" Inter- 
face Software application (B2S) may be used to initiate 
a change from one service profile to anoter. Tie B29S 
interface may interface diretly to a user terminal with a 
physical control capability such as a button on a mobile 
handset that can be pushed to invoke a cange to a spe- 
cific service profile, or multiple buttons associated wich 
specific service profiles. These buttons may be pre-con- 
figured by the manufacturer and the service provider, or 
software configured according to the individual users 
preferences, Alernatively, the B2S may interaface to a 
software running on a terminal device used by the user, 



such as a browser on a PC, a micro browser on a mobile 
handheld device, a telephone set with a software con- 
trolled display etc. All these alternatives have in com- 
mon the the user can initiate a policy change via inter- 

5 facing to the B2S application or to the PSP, which in turn 
manipulate the user database in orderto inform the SMA 
of the requested change. These applications do not di- 
rectly interface to the SMA, rather solely via the user 
database. Changes to the databae affect the user 

io record of the user requesting a service policy change. 
The B2S application and also the PSP application also 
add the username to a special concatenated list of user- 
names, which have requested a policy change. The 
SMA will check this list (or the application speific lists) 

15 regularly in very short intervals to ensure that the policy 
changes requested by the users will be implemented in 
near real-time. 

[0032] Since the change from one service profile to 
another, be it initiated by the user or by the service pro- 

20 vider, will in most cases have an impact on the account- 
ing policy (at least on the applicable tariff), the method 
according to the invention is preferably combined with 
aflexible and efficient accounting method. In a preferred 
embodiment, this accounting method is based on a pre- 

25 paid system in which a prepaid account of the user is 
decremented in accordance with the service units being 
consumed. In this respect, however, the term "prepaid 
system" does not necessarily mean that the amount to 
be paid for loading the prepaid account must actually be 

30 paid in advance. 

[0033] According to the invention, the records in the 
user data base will include a field "Prepaid Account Dec- 
rementor", which indicates, in any suitable accounting 
units, the amount by which the prepaid account will be 

35 decremented for each service unit, e.g. for each minute 
or second in which the session has continued. The cur- 
rently applicable tariff is therefore equal to the number 
of real-time accounting units that are decremented at 
the beginning of each accounting step interval. When 

40 the service profile is changed, the accounting policy can 
easily be adapted by changing the entry in the "Prepaid 
Account Decrementor". It is even possible to change the 
entry in the Prepaid Account Decrementor, and hence 
the tariff, in each accounting step interval, depending on 

^5 the contents that the user has been viewing or on the 
volume of data that have been transmitted to the user 
in the past interval, 

[0034] According to an optional but particularly useful 
feature of the invention, accounting is achieved by a way 

50 of transactions in which a certain amount of accounting 
units, which may be positive or negative, is transferred 
form one account to another. If, for example, the user is 
billed for session time on a per-minute basis, and the 
user may select between an expensive "first class" serv- 

55 ice profile in which advertising breaks are not permitted, 
and a cheaper "economy class" service profile in which 
advertising breaks are allowed, then the accounting 
method may involve a number of accounts in addition 
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to the prepaid account of the user. One of these ac- 
counts will be dedicated to the "first class" profile, an- 
other one to the "economy class" profile, and yet another 
account to each of the companies or pools of companies 
that have ordered the advertising spots. Then, when the 5 
user has selected the "first class" profile, a high decre- 
ment will be set in the "Prepaid Account Decrementor", 
and after each accounting period of one minute, a cor- 
responding amount will be transferred from the prepaid 
account to the "first class" account. When the user 10 
switches to the "economy class" profile, the entry in the 
"Prepaid Account Decrementor" will be decreased, and 
after each accounting period a corresponding smaller 
amount of accounting units will be transferred from the 
prepaid account to the "economy class" account. Thus, 
the various accounts will at any time indicate how much 
of the accumulated expenses of the user have been 
spent on the "first class w services and how much on the 
"second class" services. This more detailed information 
wil I be valuable not only for the user but also for the serv- 
ice provider. Further, during an advertising break, the 
"Prepaid Account Decrementor" may, for example, be 
set to a negative value, which means that the user is 
paid for watching the advertising spots. Then, (positive) 
amounts of a counting units will be transferred from the 
advertising accounts to the prepaid account of the user. 
As a result, the user can see at any time how much he 
has "earned" by watching the advertising, and, con- 
versely, the advertising accounts may be used by the 
service provider for billing the companies who have or- 
dered the advertising spots. In addition, these compa- 
nies get valuable feedback information on the extent to 
which there advertising has been watched, and this in- 
formation may be accessed online at any time. 
[0035] Another useful application of the accounting 
method in conjunction with the dynamically varied serv- 
ice profiles is the support of sponsoring. If a person or 
company wants to sponsor user accesses in general or 
specific websites or contents that are offered on the In- 
ternet, a specific service profile will be created for this 
purpose. More specifically, the content policy defined by 
this service profile will limit the access to contents or 
websites which the sponsor wants to sponsor. Further, 
a sponsor account is provisioned as a prepaid account 
or postpaid account for which the sponsor will be billed. 
If the site is fully sponsored, then, after each accounting 
period, the decrement specified for this service will not 
be subtracted from the prepaid account of the user, but, 
instead, will be subtracted from the account of the spon- 
sor. If the site is sponsored only partly, then a reduced 
decrement will apply to the prepaid account of the user, 
and the rest of the decrement will be subtracted from 
the account of the sponsor. Optionally, a specific ac- 
count for the sponsored profile is provisioned for the us- 
er, and the amounts subtracted from the account of the 
sponsor are added to the account for the sponsored pro- 
file, so that the user may check at any time how much 
he has obtained from the sponsor. 



[0036] As an alternative, sponsoring may be achieved 
by transferring a limited amount of accounting units from 
the account of the sponsor to the prepaid account or to 
a specific sponsored account of the user at the time 
when the user switches to the sponsored profile. Then, 
after each accounting period, the decrement is subtract- 
ed either from the prepaid account of from the spon- 
sored account, as long as the same is not depleted. 
[0037] Although the transaction-based accounting 
method described above is particularly useful in con- 
junction with dynamically varied service profiles, the 
field of application of the accounting method is not lim- 
ited to this. 

[0038] For example, the accounting method may also 
be used for safe and easy-to-han-dle payments, in B2B 
(Business to Business) or B2C (Business to Customer) 
e-business activities or even in P2P (Peer to Peer) 
transactions. This is particularly useful in conjunction 
with micropayments, i.e. with payments in which the 
amounts being paid are so small that the transaction 
costs of a normal payment mode such as a payment via 
credit card would be disproportionately high. If, for ex- 
ample, private users communicate with each other over 
the Internet by e-mail or within a chat room or within a 
news group, and one user wants to reward another user 
for having given a valuable information or having al- 
lowed him to download an interesting file, a payment 
equivalent to a small amount of money can be made by 
transferring a corresponding amount of accounting 
units. On behalf of the person receiving the payment, 
these accounting units may be added to the prepaid ac- 
count. In a similar manner, payments may be made to- 
commercial Application Service Providers (ASP), to an 
information broker or the like. Thus, it would be possible 
for example for a commercial contents provider to pro- 
vide an online dictionary or encyclopedia and to claim a 
small fee for each catchword that is looked up in the dic- 
tionary. The fee will then be paid in accounting units. As 
a value-added service, the Internet Service Provider 
may then act as a transaction mediator. The mediator 
bills the client user in legal currency for loading his per- 
sonal prepaid account. The payments to the contents 
provider will accumulate on an account of the ASP, and 
this account will be balanced from time to time by con- 
verting the accounting units into legal currency and by 
transferring a corresponding amount in legal currency 
from the mediator to the contents provider. In this case, 
the accounting units used in the network accounting 
system will not only serve for billing purposes of the In- 
ternet Service Provider but will also have the function of 
a virtual currency for other business transactions. 
[0039] The realtime accounting method described 
does not only apply to prepaid, but also for direct post- 
paid accounting and billing. Depending on the account- 
ing mode, the SMA acts either as prepaid system or as 
postpaid system. It should be understood that the solu- 
tions presented herein are not limited to prepaid, but are 
at the same time applicable to postpaid as well. When- 
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ever this docurnert discusses prepaid, an equivalent 
postpaid solution can be devived as follows: When the 
prepaid system decrements (the tariff), a postpaid sys- 
tem will increment. When a prepaid system checks for 
account depletion, a postpaid system does not need to 
to that, however it will check if an optional payment ceil- 
ing has been reached. Once per month or per quarter a 
bill will be produced. 

[0040] The accounting method according to the in- 
vention may also be used for statistical purposes in a 
broad sense. In this context, the accounts of an individ- 
ual user may not only be linked to different service pro- 
files but may also be linked to different categories of 
services and/or contents within the same profile. For ex- 
ample, there may be one or more accounts for different 
types of advertisements that the user has watched, an 
account for online purchases of the user, for which the 
Internet Service Provider gets a commission or which 
are profitable (or the ISP in any other way, and the like. 
This will among others allow the Internet Service Pro- 
vider to permanently rate the users as to their profitabil- 
ity. This may be attractive also in a flat rate scenario, in 
which the user is not billed per service units but pays a 
fixed monthly amount for having access to the network. 
In conjunction with dynamically changing service pro- 
files, this rating information may be used for automati- 
cally switching profitable users to a more extended serv- 
ice profile or, conversely, for restricting the service pro- 
file of less profitable users. This rating procedure and 
its consequences may either be visible or invisible for 
the user. 

[0041] Such statistical information may also be bene- 
ficial for the user, since it may be utilized, for example, 
for establishing an automatic fraud detection system, e. 
g. by implementing customer-visible or invisible pay- 
ment ceilings or by monitoring for abnormal user behav- 
iors which could hint to fraudulent usage. 
[0042] The balance between privacy and accountabil- 
ity, i.e. the extent to which the behavior of the user can 
be tracked, will depend on the selection of user-specific 
and global accounts. User-specific accounts will allow 
to track the behavior of individual users with a resolution 
that depends on the definition of service categories and/ 
or content categories represented by the different ac- 
counts. On the other hand, global accounts will only re- 
flect the collective behavior of the users, without any 
possibility to identify the users who have used the cor- 
responding services. 

[0043] The functionality that is enabled by the ac- 
counting method according to the invention leads to a 
variety of features which may again be used for speci- 
fying different service profiles. For example, the service 
profiles may be distinguished in terms of the policies de- 
scribed below: 

Advertising policy: 

[0044] A policy which governs the way in which the 



user is exposed to (and forced to view) advertising, in- 
cluding for example the rate and length of advertising 
breaks interrupting the user's normal usage and forcing 
him to view the advertising, the kind of advertising, and 
5 whether or not targeted advertising is applicable to this 
user. 

Rating policy: 

10 [0045] The policy governing the way a customer is rat- 
ed for profitability to the service provider or for other cri- 
teria specified by the service provider. For example, if 
the rating is partly visible to the user via customer loyalty 
bonus points, the policy may also govern how to react 

is to the rating of the user, e.g. by upgrading a profitable 
user to a better quality of service or downgrading a less 
profitable user to lower quality of service or a different 
advertising policy - of course always within the bound- 
aries of the service contract. 

20 

Fraud detection policy: 

[0046] The policy governing invisible payment ceil- 
ings, classification of users according to normal, usage 
25 patterns, user notification policy, etc. 

[0047] Since the accounting method described above 
is not limited to the case that the service profile is varied 
dynamically, another aspect of the present invention re- 
lates to an accounting method for telecommunications 
30 services, wherein users consume telecommunications 
services in predefined service units having each a spe- 
cific value that is express in accounting units, and each 
user has at least one accountthat is incremented or dec- 
remented essentially in real-time in accordance with the 
35 service units being consumed, comprising transactions 
in which a positive or negative amount of accounting 
units is transferred from an account of a user to another 
account. 

[0048] In this context, the expression "essentially in 
40 real-time" means, that the accounting information is pro- 
vided accurate and timely enough to be perceived by 
the service provider and/or the users or other partici- 
pants to the network in real-time, when considering in- 
evitable response times in the network based systems. 

45 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0049] Preferred embodiments of the invention will 
now be described in conjunction with the drawings, 
so wherein: 

Fig. 1 is a block diagram of a Multifunctional Prepaid 
System illustrating the principles of the inven- 
tion; 

55 

Fig. 2 is a diagram of a Personal Prepaid Record 
(PPR); 
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Fig. 3 is a flow chart illustrating the basic steps of the 
method according to the invention; 

Fig. 4 is a flow chart of an accounting routine; and 

5 

Fig. 5 is a simplified illustration of a user screen. 

DESCRIPTION OF PREFERRED EMBODIMENTS 

[0050] Described is a Multifunctional Prepaid System 
illustrating the principles of the invention. This system 
is particularly useful for the real-time-accounting of B2B 
and B2C e-Business activities and of network access 
costs (over wireline and wireless networks) including 
privacy protection capability with multiple privacy modes 
and the capability for payment ceiling, sponsor-financ- 
ing and advertising financing with the possibility for the 
interruption of unrestricted usage via advertising blocks 
with restricted alternate usage, as well as with the pos- 
sibility for the fine-tuning of advertising campaigns in re- 
al-time according to regional or other anonymised cus- 
tomer data, as well as with the possibility for the user to 
change his usage profile within a usage session multiple 
times, including the applicable tariff and the applicable 
security policy and the applicable privacy policy, and al- 
so the possibility for the user to monitor the current serv- 
ice policy and the status of his related accounts in real- 
time. 

[0051] The Multifunctional Prepaid System - in the fol- 
lowing abbreviated as MPS - is a total system consisting 
of multiple hardware and software elements, which work 
together in a special way to deliver an extensive set of 
features as outlined above. 

[0052] Fig. 1 shows the core elements of the Multi- 
functional Prepaid System as well as some comple- 
menting elements. 

[0053] A Multifunctional Prepaid Logic 10 (abbreviat- 
ed as MPL) comprises a database called Personal User 
Database 12 (abbreviated as PUD) and at least one ap- 
plication called Session Manager Application 1 4 (abbre- 
viated as SMA) as well as at least one RADIUS server 
application 1 6 for authentication purposes. The MPL 1 0 
implements the complete services logic describing the 
Internet users (subscribers) and other participants of the 
Multifunctional Prepaid System such as sponsors and 
advertisers. The Multifunctional Prepaid Logic is de- 
scribed in the database structure in conjunction with the 
execution principles of the Session Manager Application 
14. 

[0054] A user 1 8 accesses the M PL 1 0 via a Network 
Service Switch 20 (NSS). The NSS is controlled by the 
MPL 10 and determines the contents to which the user 
18 has access. These contents may include the totality 
or a restricted selection of contents 22 that are acces- 
sible over the Internet, including contents hosted by con- 
tent providers, Application Service Providers (ASP), 
streaming providers, and the like. A specific class of 
contents 24 has been shown separately These con- 



tents 24 are sponsored by a sponsor, so that they can 
be watched at reduced costs or cost-free. 
[0055] Another class of contents 26 consists of adver- 
tising spots that have been compiled by the service pro- 
vider for the purpose of at least partly financing the serv- 
ices by advertising. 

[0056] The service provider has further provided a 
number of special websites 28, 30 and 32, including a 
start period website 28 to which the user is forcibly di- 
rected when he logs on to the network. Another website 
30 called "Content and Policy Selection Portar (PSP) 
can be visited by the user at any time during the session 
and permits the user to change his service profile within 
the session. 

[0057] If the prepaid account of the user is depleted, 
he is forcibly directed to a "period of grace website" 32 
which advises the userthat he has to reload his account 
or otherwise will be disconnected from the network. 
[0058] The Multifunctional Prepaid Logic 10 is also 
accessible through a number of interfaces 34, such as 
B2B interfaces, B2C interfaces and P2P interfaces that 
will be used for various kinds of business transactions. 
[0059] In the Personal User Database 12, each user 
has a Personal Prepaid Record (PPR) 36 the structure 
of which is shown in Fig. 2. 

The PPR 36 contains various fields such as the following 
very essential fields: 

[0060] User-ID 28, Password 40, Personal Prepaid 
Account (PPA) 42, Prepaid Account Decrementor (PAD) 
44, a Depletion Policy field 46, a Pointer to Depletion 
Policy Parameters47, and a Pointerto Counter Account 
48. 

[0061] The User-ID identifies the user, the Password 
is used to authenticate the user, the Personal Prepaid 
Account contains the current value in acccounting units 
of the Prepaid Account - basically representing a value 
to the userthat he has acquired by prepaying or by other 
means. The Prepaid Account Decrementor represents 
the currently applicable tariff, as it describes the number 
of acccounting units spent per accounting interval (com- 
parable to a spending speed). The amount by which the 
Personal Prepaid Account is decremented is transferred 
to a counter account 50 which is not necessarily includ- 
ed in PPR. There may be a large variety of accounts 
which serve as counter account for a specific transfer 
action, depending on the actual service profile or on the 
type of transaction. This is why the PPR includes the 
field Pointer to Counter Account which specifies the ap- 
plicable counter account. Depending on the privacy 
mode selected, the counter account may be a personal 
account included in the PPR of the same user or a global 
account owned by the internet Service Provider or an- 
other participant, e. g. an advertiser, a sponsor or the 
like. In case of P2P transactions, the counter account 
may also be a Personal Prepaid Account or another ac- 
count of another user. 
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[0062] The Depletion Policy field 46 and the Pointer 
to Depletion Policy Parameters 47 specify which action 
has to be taken when the Personal Prepaid Account be- 
comes depleted. 

[0063] The PPR further includes a Personal Control 
Field 52 and a Dynamic Control Field 54 the functions 
of which will be explained later. 

[0064] Depending on the operating mode or service 
profile selected, the PPR may be in plain format or in 
extended format. The plain format includes the fields de- 
scribed above as well a Pointer to Extension 56 } a Point- 
er to Advertising Control 58, and otherf ields 60 that may 
be used for other purposes. 

[0065] Further, the plain format includes several ad- 
vertising control blocks one of which is shown in Fig. 2. 
An Advertising Block Duration Account 62 is decrement- 
ed by an amount specified in an Advertising Block Du- 
ration Decrementor 64 at the start of each accounting 
interval in which the user was restricted to watching a 
specific advertising block that is linked to the acccount 
field 62 and to a corresponding global counter account 
of the advertiser. A Depletion Policy field 66 specifies 
the action to be taken when the Advertising Block Du- 
ration Account becomes depleted, e. g. return to the de- 
fault profile of the user. Additional fields 68 will control 
the duration of each individual advertising spot within 
the advertising block in an analogous manner. 
[0066] The depletion policy specified in the field 46 or 
66 may imply that access of the user is restricted to cer- 
tain IP adresses. In this case the service profile to be 
employed is not necessarily fully pre-defined in the NSS. 
Instead, the PPR iccludes the fields "Pointer to Deple- 
tion Policy Parameter" 47, 68 which are associated with 
the Depletion Policy field and point to parameters such 
as an IP adress which the SMA must hand-over to the 
NSS when instructing the NSS with a new policy. This 
method can also be used for exclusive premium content. 
[0067] The plain format is sufficient when the user is 
using a privacy mode that does not need accountability 
and when the advertising mode does not need to track 
which advertising the user viewed. It is expected that 
the vast majority of users will mostly be using modes 
that are associated with the plain format (it is expected 
that services associated with the plain format are cheap- 
er than services with extended format). 
[0068] The Pointer to Extension 56 points to an ex- 
tension which represents the extended format and, in 
the example shown, includes fields 70 to 80. 
[0069] When the user 1 8 accesses the service, he will 
logically connect to the Network Service Switch 20 
(NSS). The NSS constitutes the "subscriber edge" 
where the subscriber (customer) communication is an- 
chored, regardless which access method the customer 
uses. The NSS 20 will via the RADIUS protocol commu- 
nicate with the RADIUS server 16 to authenticate the 
user. The RADIUS server 16 looks up the user record 
(the PPR - Personal Prepaid Record) in the Personal 
User Database 1 2 , and if it finds the user and if the pass- 



word or another authentication method employed 
matches, the RADIUS server will send a positive au- 
thentication to the NSS 20. The RADIUS server will 
modify the PPR in the database to indicate that it is cur- 
5 rently an active user and will add the user-ID to a 
change-request list in the database 1 2. The SMA 1 4 will 
interrupt regularly (e. g. after manipulating a number of 
user account in it's local cache) to look up in the data- 
base, if a change has been requested. It will retrieve the 
10 PPR and stor a copy of the PPR into it's local cache. 
The cache holds all active users. The copy of the PPR 
stays in the faster memory (the cache) until the user dis- 
connects. When the user disconnects, the RADIUS 
server 16 is informed of that fact via a RADIUS account- 
's jng stop message and will indicate in the PPR that the 
user is no longer active and will inform the SMA 14, 
again via the database, to remove the PPR of that user 
from the active user cache. 

[0070] The Network Service Switch 20 (NSS), which 
20 is controlled by the MPL 10, allows to change the user 
profile (effectively re-authorizing the same user) multi- 
ple times during a session. This effectively splits a user 
session into multiple part-sessions with a re-authoriza- 
tion of the same user taking place at the start of each 
25 part session - applying a separate user profile and a'sep- 
arate tariff and potentially also accounting mode to each 
part session. 

[0071] The basic steps of the method of providing In- 
ternet access and, especially, of changing the service 

30 profile, are illustrated in Fig. 3, which gives a high-level 
view of the functions performed by the MPL 10 as a 
whole. A session starts when the NSS signals, e. g. via 
a RADIUS Accounting Start Request, that service deliv- 
ery using the initial authorisation has in fact started. In 

35 step SOsave, the RADIUS Server 1 6 will update the PPR 
to mark it as active user and will also request the SMA 
via the database to add the PPR to it's local cache. In 
step S1, it is checked whether there is a request to 
change the service profile. This request may be entered 

40 by the user or may be the result of an event that is de- 
tected in the accounting procedure such as the event 
that the prepaid account of the user is depleted. The 
step S1 is repeated cyclically, until a request for a new 
service profile occurs. Then, the personal prepaid 

45 record PPR is updated in step S2, and the Network 
Service Switch 20 is instructed in step S3 to reconfigure 
the service profile for the user. Then, it is checked in 
step S4 whether the session is terminated. If this is not 
the case, the routine loops back to step S1 , and the se- 

50 quence of steps described above is repeated until the 
user logs off or is forcibly disconnected from the net- 
work. When it has been detected in step S4 that the ses- 
sion is terminated, e. g. on receipt of a RADIUS Account- 
ing Stop message by the RADIUS Server 16, the PPR 

55 of the user is deleted from the cache, and the user will 
no longer be treated as an active user. 
[0072] The SMA 1 4 is an application which is started 
automatically by the system in certain intervals (called 
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accounting step) and manipulates the data records in 
the Personal User Database (PUD) 12 in every account- 
ing step by transferring accounting units from one ac- 
count to one or multiple other accounts, whereby strictly 
ensuring that the sum of all acccounting units in the 
overall M PS does not change within an accounting step. 
An MPS-unit can be money in any currency or scaled 
money such a 1/10 Cent. Alternatively, an MPS-unit can 
also be time in seconds or minutes or any other time 
unit. Alternatively, an MPS unit can be bonus points of 
a customer loyalty system similar to the "air-miles" re- 
warding system used by air carriers, or other rewards 
provided by companies to their customers as a custom- 
er binding incentive. Alternatively, acccounting units can 
be newly created units that do not yet exist today, such 
as "prepaid miles" where a prepaid mile has a fixed price 
at a certain time (the purchase time), which may how- 
ever vary over time, or sponsor "miles" or advertising 
"miles" representing a special unit for accounting with 
advertisers and sponsors. Alternatively, an MPS unit 
can also be privacy-miles which allow to access the In- 
ternet with differentiated privacy levels and change the 
privacy level multiple times within a user session, 
whereby the user selects the appropriate privacy level 
for the respective Internet activity. 
[0073] In general, there is a conflict between the de- 
sire of the user for privacy - and the desire of the user 
for accountability. Accountability allows the user to 
make his service provider accountable for the service 
provided, e.g. via refusing to pay for an item in a bill that 
the user claims to have not purchased or perhaps only 
received with degraded quality. Accountability means 
for the service provider that he needs the ability to roll- 
back or compensate for e-commerce transactions 
where the user is not satisfied with the service provided 
or goods delivered. The user may demand the transac- 
tion to be rolled back (e.g. return the good based on laws 
for consumer protection) and therefore the service pro- 
vider has to keep data on the user behavior in order to 
be able to rollback the e-commerce transaction or at 
least verify if the user complaint is substantiated. As a 
result the service provider would have to collect data on 
the user behavior such as his e-commerce transactions, 
content consumed, etc. Collection of this data is how- 
ever in conflict with the user's desire for privacy. The 
MPS solves this problem by providing the user the 
choice at all times which privacy level he wants to be 
applied for the current Internet activity. If he wants to 
enforce privacy in that way that the service provider shall 
not track the user behavior for the next part session, he 
at the same time has to agree to give away his right to 
complain if the quality of the service was not satisfactory. 
[0074] Six privacy levels are implemented in the 
MPS: 

Basic Accountability (e.g.: Service Provider tracks 
the flow of acccounting units for rollback capability) 



Advanced Accountability (e.g. in addition: Service 
Provider performs IP billing on packets on a volume 
basis) This is achieved by the SMA 14 dynamically 
changing the decrementor field prior to decremen- 
5 tation on the basis of the number of packets counted 
by the NSS 20 in in up to 64 buckets according to 
the value of the TOS field in the IP-packet. 

Premium Accountability (e.g. Service Provider acts 
10 as mediator for e-commerce transactions) 

Basic Privacy (e.g.: Service Provider does not know 
to which account acccounting units have been 
transferred - no tracking, no rollback capability, no 
*s technical way to tell which content or which adver- 
tising the user viewed) 

Advanced Privacy (like basic privacy but plus e.g. 
basic anonymity for e-mail, cooky filtering) 

20 

Premium Privacy (e.g. : advanced anonymity of the 
user is being granted by alias interfaces) 

[0075] Related to the privacy mode are advertising 
25 modes. Advertising modes may or may not be user-se- 
lectable (alternatively they may be hard linked with a 
certain service). There are several advertising modes 
(combinations are possible if they are not contradictory), 
for example: 

30 

No advertising (premium rate) 
Anonymous advertising 



Client 



Exclusive Advertising (barring all other uses) 

Non-exclusive Advertising (user can do other activ- 
ities in parallel) 

55 

Targeted advertising 

Target Plus: Targeted advertising with tracking 



35 - Advertising at session start 
Advertising at session end 
Advertising at policy change 

40 

Advertising at time interval 
Advertising in cooperation with 
45 - Advertising Client triggered 

Advertising embedded in Client 
Full Screen interstitial advertisir 

50 
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which advertising the user viewed 

Event and context driven advertising 

[0076] Fig. 4 summarizes the basic steps of the ac- 
counting procedure. In step S11, it is checked whether 
the accounting step interval has elapsed. This step is 
repeated, until the interval has actually elapsed. Then, 
the accounting for all active users is done in step S12. 
To this end, the current service profile of the user is de- 
termined, and it is decided which accounts may or must 
be changed pursuant to this service profile and which 
counter accounts are linked to these accounts. Then, 
each account that has been determined in this way is 
changed by subtracting the decrement that has been 
specified for this account. For example, if the account is 
the Personal Prepaid Account 42 shown in Fig. 2, then 
the corresponding decrement is indicated by the Pre- 
paid Account Decremenlor 44. The same decrement is 
then added to the counter account 48 associated with 
the present account. In an accountability mode, the 
counter account for the Personal Prepaid Account may 
be a personal receiving account included in the exten- 
sion fields 70, 72 of the PPR. Similarly, the accounting 
step may include the transfer of a number of account- 
ing units specified in the field 78 ("DecrementorX") from 
the field 74 ("Account X") to the field 76 ("Counter Ac- 
count X"). Likewise, accounting units subtracted as dec- 
rement from the Advertising Block Duration Account 
may be added to the corresponding couter account 
which enables the advertiser to monitor in real-time how 
much time the users have collectively spent on watching 
this advertising block. 

[0077] In step S12, it is also checked for each active 
user and for each account whether the account has be- 
come depleted. If this is the case, the SMA will intruct 
the NSS to select the service policy defined by the vau- 
lue in the field Depletion Policy and optionally by addi- 
tional parameters defined by a list of chained parame- 
ters anchored by the Pointer to Depletion Policy Param- 
eter. Subsequent to step S12, the routine returns to the 
start position and will be re-executed when the next ac- 
counting step interval has elapsed. 
[0078] An essential feature of the MPL is the fact that 
it works according to the principles of accounting where 
the sum of all accounts remains constant In an account- 
ing step. It is of course possible to fill or otherwise ma- 
nipulate accounts via an external interface - however the 
SMA 1 4 will not change one accou nt without transferring 
the balance to another account in the system, thus keep- 
ing the balance of all accounts in the database constant. 
This implies that there is a global account "Service Pro- 
vider Earned Net Revenue" (represented by the Counter 
Account 48 in Fig. 2), which may be split further into su- 
baccounts. In this account the Service Provider can 
check how much of the acccounting units (e.g. prepaid 
money) has actually been spent by the users, reduced 
by the amount that other parties (e.g. content providers) 



have received in their global accounts. 
[0079] In the accountability mode and in Target Plus 
advertising mode the SMA 14 transfers acccounting 
units only within the PPR. Therefore, the PPR in extend- 
5 ed mode contains receiving accounts (such as in fields 
70, 72) where the prepaid acccounting units will be 
transferred to in each accounting step, and also donat- 
ing accounts such as sponsor accounts where (nega- 
tive) MPS units get added (thus subtracted) when a 
sponsoring takes place or an advertising is viewed that 
is sponsored. This can be used to implement a personal 
maximum sponsoring threshold on a per customer basis 
and also on a per sponsor basis and also to limit the 
maximum time a single user can view a certain adver- 
tising (and get acccounting units for it). It can also be 
used to target advertising taking into consideration 
which advertising the individual user has previously 
seen. 

[0080] If not using the extended mode it is normal that 
the SMA transfers acccounting units between a PPR 
and one or multiple global accounts during an account- 
ing step. In this case, it is not possible to track for each 
individual sponsor or adver-tiser - which user has been 
transferred the acccounting units (who did benefit from 
sponsoring, and who did see a particular advertising or 
a particular exclusive content). This can be used to en- 
sure privacy protection. The MPL and each PPR can be 
run in mixed mode where some accounts are treated in 
fully personalized mode whereas other accounts are 
treated in global mode. 

[0081] In the variant "Global-Mode" the sum of all so- 
called global accounts and of all active PPRs is always 
balanced (zero) after each completed accounting step. 
Accounting steps are executed by the Session Manager 
Application 1 4 (SMA) regularly in certain intervals called 
Accounting Step Interval. Each PPR may optionally con- 
tain a field "Accounting Step Interval" containing a value 
that defines the applicable accounting step interval as 
a multiple of a system-wide variable called "Smallest Ac- 
counting Step Interval". This variable is configurable as 
a constant value determining a time interval with system 
wide significance. If the smallest accounting step inter- 
val is one second, then a value of 60 in the "Accounting 
Step Interval" field of the PPR means that accounting 
for this customer is done on a per minute basis. Each 
PPR contains at least the Personal Prepaid Account 42 
as well as the Prepaid Account Decrementor 44, in 
which the current speed of spending acccounting units 
is kept. For simplicity, if the "Accounting Step Interval" 
field is not present in the PPR, then a default value of 
one second applies. In addition, the database contains 
an account "Service Provider Revenues", to which the 
acccounting units are transferred when they are decre- 
mented in the individual personal prepaid accounts - al- 
ternatively multiple accounts may be used to split the 
revenue across multiple accounts according to the cost 
structure of the service provider or according to other 
criteria that can be flexibly configured by the service pro- 
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vider. 

[0082] The PPR contains the two control fields men- 
tioned above, i.e. the Personal Control Field 52 and the 
Dynamic Control Field 54. These control fields (includ- 
ing optional extensions) determine how the SMA 14 
handles the PPR 36 in each accounting step. The Per- 
sonal Control Field is static and cannot be changed by 
the SM A, the Dynamic Control Field is dynamic and can 
be changed by the SMA. The Personal Control Field 
contains preconfigured controls, whereas the Dynamic 
Control Field controls the dynamic behavior within a us- 
er session. 

Personal Control Field: 

[0083] Bit 1 : If set to 0 it operates in global prepaid 
mode, if set to 0 it operates in personal prepaid mode. 
In personal mode, the SMA is only allowed to transfer 
acccounting units from the prepaid account in the PPR 
to one or more other accounts in the same PPR within 
an accounting step. 

[0084] Bit 2: If set to 0 it means simple accounts (all 
accounts are in the same M PS-unit, no account restric- 
tions apply. If set to 1 , there is an additional database 
field for each account that is called account control field. 
It may be a separate field or it may be a number of bits 
from the decrementor field reducing the value range of 
the decrementor field. If present, the account control 
field determines in which acccounting units the account 
be run. When operating in mixed M PS-unit mode, the 
SMA uses a conversion table to convert from one MPS- 
unit into another in each accounting step where neces- 
sary. This conversion table (including the applicable 
conversion rates) may be dynamic and may be changed 
via an external B2B interface (one of the interfaces 34 
in Fig. 1 ). The account control field may also determine 
limitations to the account, e.g. whether an account and 
an associated decrementor field can never be de- 
creased or whether it can never increased e.g. by an 
external interface. 

[0085] Bit 3: If set to 0: Advanced mode (to each ac- 
count there is a variable decrementor field). If set to 1 : 
Simplistic mode, i.e. decrementor fields are not present, 
all decrementors are 1 unit and cannot be changed, i.e. 
in each accounting step the SMA subtracts the value of 
1 from the respective accounts. 

Bit 4: reserved 

[0086] Bit 5: If set to 0. a session starts with the default 
mode, if set to 1 , the session starts with a special start- 
period (website 28). 

[0087] Bit 6: If set to 0, a "period of grace" does not 
apply, if set to 1 a period of grace applies after the pre- 
paid account has been depleted. 
[0088] Bit 7: If set to 0, global advertising mode ap- 
plies, if set to 1 , personal advertising mode applies. 
[0089] Bit 8: If set to O: The decrementor field is not 



6 445 A1 22 

volume based, only time based. If set to 1 : A Prepaid 
Volume Based Decrementor applies, which means that 
the SMA has to reset the Prepaid Volume Based Dec- 
rementor (PVD) to 0 at the end of the accounting step 

5 and transfer the volume units to a total volume account. 
This assumes that the network element sends volume 
units less frequently then the accounting steps are oc- 
curring. A volume based interface enables the NSS 20 
to measure traffic volume parameters and set the Pre- 

10 paid Volume Based Decrementor accordingly. The PVD 
is zero when no traffic volumes are measured, (thus a 
subtraction of zero does not change the prepaid ac- 
count). After the PVD has been subtracted from the pre- 
paid account, the PVD is set to zero, in which way it is 

is ensured that a used volume is only accounted for once. 
[0090] Bit 9: If set to 0, the system operates in global 
sponsor mode, if set to 1 It operates in personal sponsor 
mode. 

[0091] Bit 10: If set to 0 the system operates in global 
20 content mode, if set to 1 it operates in personal content 
mode. 

[0092] Bit 11 : If set to 0, shared advertising does not 
apply to this user, if set to 1 it applies. 
[0093] Bit 12: If set to 0, exclusive advertising does 
2s not apply to this user, if set to 1 it does apply. 
[0094] Bit 13 Reserved 
[0095] Bit 14 Reserved 
[0096] Bit 15 Reserved 

[0097] Bit 1 6 If set to 0, an extension Personal Control 
30 Field is not present, if set to 1 such a field is present. 

Dynamic Control Field: 

[0098] Bit 1 : Mode change indication 

35 [0099] Bit 2: reserved 

[0100] Bit 3: If set to 0, the PPR is currently in default 
mode, if set to 1 , it is in non-de-fault mode 
[0101] Bit 4: If set to 0 the PPR is currently in non- 
advertising mode (i.e. the user is currently not interrupt- 

40 ed by an advertising break), if set to 1 the PPR is in ad- 
vertising mode, i.e. the user is being interrupted by an 
advertising break 

[0102] Bit 5: If set to 0 the user is currently not in a 
start mode, if set to 1 , he is in the start mode. 

45 [0103] Bit 6: If set to O, the user is currently not in a 
"period of grace", If set to 1 the user Is currently in the 
period of grace (he sees only website 32). 
[0104] Bit 7: If set to 0 the user is currently not in ad- 
vertising mode, if set to 1 he is in advertising mode. 

so [0105] Bit 8. Reserved 

[0106] Bit 9: If set to 0 it operates in global sponsor 
mode, if set to 1 it operates in personal sponsor mode. 
[0107] Bit 10: If set to 0 it operates in global content 
mode, if set to 1 it operates in personal content mode. 

55 [0108] Bit 11 : If set to 0 : the PPR is currently not in a 
Premium Mode (e.g. accessing premium content), if set 
to 1 , it is currently in premium mode and therefore an 
account that limits the maximum premium time has to 
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be decremented. 

[0109] Bit 12: If set to 0, the PPR is currently not in a 
sponsor mode, if set to 1 it is currently in sponsor mode. 
This can be used to limit the duration of a sponsor mode 
part-session. 

[0110] Bit 13: Reserved 
[0111] Bit 14: Reserved 
[0112] Bit 15: Reserved 

[0113] Bit 16: If set to 0 : an extension Dynamic Control 
Field is not present, if set to 1 an extension Dynamic 
Control Field is present. 

[0114] All accounts of a PPR including the respective 
decrementor fields can be chosen to be in one of the 
following acccounting units: local currency of the user, 
another currency, bonus points of a customer loyalty 
program, bonus points that can be purchased or other- 
wise acquired e.g. via e-commerce activities or by view- 
ing advertising, existing loyalty program units such as 
airmiles, rewards, etc., new bonus programs, advertis- 
ing "miles" that specify a unit for flexible accounting with 
advertisers (broadcasting an advertising spot in a prime 
time may cost more advertising miles per second than 
during another time of the day, customer invisible units 
such as profitability miles that are hidden to the custom- 
er but have influence to the quality of service that the 
customer receives within the boundaries of his contract, 
invisible accounting miles that are used to produce a bill 
for customers that are not prepaid, but postpaid, micro- 
payment units from any micropayment system on the 
market or new micropayment system units, vague value 
miles, where the exact value of the mile may differ on 
the time of day or other criteria not transparent to the 
user or owner of the mile. In the case when the MPL 
works with multiple acccounting units in parallel or in 
mixed mode between prepaid-Miles and currencies, 
each account will also have a field indicating the curren- 
cy applicable for this account. The system may also con- 
tain a systemwide configurable conversion table to con- 
vert between different forms of acccounting units. This 
conversion table can be manipulated via additional pa- 
rameters and interfaces to other systems such as by the 
B2B interface 34 to allow that the table calculation may 
be non-linear and the conversion result may differ de- 
pending on time of day, or other factors such as a real- 
time course determined at a B2B-exchange for ac- 
ccounting units at a market comparable to the stock 
market NASDAQ but which is trading 24 hours around 
the clock. 

[0115] At each accounting step the MPL subtracts 
from all PPRs of active users the actual value of all pre- 
paid decrementor fields from their associated prepaid 
accounts and transfers the same value to another ac- 
count in the system (in personal mode this account is 
also part of the same PPR : in the global variant this ac- 
count may alternatively be a systemwide account). 
[0116] In addition to the customer prepaid account 
there may be additional accounts in the PPR and system 
wide in the M PS, which work according to the same prin- 



ciple as the customer prepaid account. This means they 
have an associated decrementor field - so-called unre- 
stricted decrementor fields, where the decrement value 
is allowed to become a negative value, which leads to 

5 an increase in the associated account during the sub- 
traction done in the accounting step (and an associated 
decrease in the counter-account which could be a spon- 
sor account). Some accounts may be classified as re- 
stricted accounts. In this case the MPL ensures auto- 

10 matically that the account value can only change in one 
direction i.e. either always increases during an account- 
ing step (or remains at the same value) or decreases 
during an accounting step (or remains at the same val- 
ue). A sponsor account is usually an account which will 

*5 only decrease during an accounting step (while it leads 
to an increase in the accounts that benefit from the spon- 
sor). 

[0117] The PPR may also contain accounts that are 
used for the control of advertising breaks. The user nor- 

20 mally has a default profile which is applied at the begin- 
ning of the session. The default profile may be preceded 
by a profile that forces the user to a certain homepage 
at the start. This could be the "Content and Policy Se- 
lection Portal" 30, or it could be the Start Period Website 

25 28 directing the user to the website of a sponsor;or to 
an initial advertising spot. After the optional start period 
(which is controlled by a start period account with asso- 
ciated decrement) the user is assigned into his default 
profile. If the user service includes interruption by ad- 

30 vertising breaks, then there is an account present that 
controls the time till the part-session with the default pro- 
file ends and is followed by an advertising break. This 
account is called Default Profile Account and together 
with it's associated decrementor field it is used to control 

35 the time between advertising breaks during which the 
user is assigned his default profile. The default profile 
could for example allow him to surf freely in the Internet. 
Alternatively, the default profile may limit the user to a 
very basic service such as access only to websites via 

40 http. In this case, unrestricted Internet access may be 
offered as a premium service. The service provider is 
free to define the default profile according to the market 
requirements. When the Default Profile Account is de- 
pleted, the Session Manager Application 14 changes 

45 the profile of the user to the profile of the first advertising 
spot in the advertising block and transfers the PPR into 
advertising mode. The switchover to the advertising 
mode is performed automatically by the Session Man- 
ager Application. The duration of the advertising block 

so js determined by the account "Advertising Block Dura- 
tion" and it's associated decrementor field . The duration 
of the advertising block may thus be measured in either 
time (default: seconds), or acccounting units including 
specially created advertising miles. The counter ac- 

55 count in the personal variant is a PPR account in which 
the amount of consumed advertising per customer is 
measured in either time or acccounting units (e.g. ad- 
vertising miles). The counter account in the global vari- 
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ant is an equivalent global account for ail active custom- 
ers or all customers in the system. 
[0118] Within the advertising block it is possible to 
schedule different advertising spots in a certain se- 
quence, where the duration of the current advertising 
spot is controlled by an "Advertising Spot Account" and 
it's associated decrementor, if the default of one second 
decrement and 1 second accounting step during adver- 
tising breaks is not used. The decrement may be in time 
or acccounting units. Advertising miles are an option for 
the accounting unit, which can be used for factoring and 
accounting with the advertising companies. The se- 
quence of the advertising spot is determined by a pointer 
in the PPR that refers to the next advertising spot. The 
advertising spots are organized in a data structure that 
can be referred to as chain or (optionally also as ring) 
and the sequence in the chain or ring determines the 
sequence of the advertising spot. There may be a global 
chain or ring with the PPR pointing to one specific ad- 
vertising spot at each time that is the next advertising 
spot to be shown to the user. There may alternatively 
be a personal advertising data structure per PPR (per 
user) which determines the sequence of advertising 
spots showed to a specific user and can be used for tar- 
geted advertising including the option to change the se- 
quence of advertising dynamically depending on 
events. 

[0119] The MPS system owner can configure the se- 
quence of advertising spots on a per customer basis in 
a flexible and dynamic way, he can also change the se- 
quence during an advertising spot depending on certain 
events. 

[0120] During advertising breaks, normal accounts 
will not be changed - instead accounting steps apply on- 
ly to advertising accounts. If the default for advertising 
steps applies, then one advertising step is executed per 
second and only the advertising accounts are decre- 
mented. If the default does not apply, then the following 
more general method applies: In each advertising step 
the value of the associated decrementor field is sub- 
tracted from the advertising accounts and transferred 
(added) to a counter account (in personal mode an ad- 
vertising account is part of the PPR, in global mode it is 
a system wide account which summarizes the sum of 
ail advertising consumed as well as the sum seconds/ 
decre-ments of each advertising spot consumed). This 
way it is possible in personal mode to view how much 
of which advertising spots each user in personal mode 
has viewed, in global mode, it is only possible to deter- 
mine how much advertising was consumed and of which 
advertising spots, but not by which users. 
[0121] The advertisers can access the system at any 
time over the Internet or another interface and view the 
current value of the global advertising account. This way 
they can study exactly the rate at which the advertising 
campaign is being viewed by the users. They can cor- 
relate this information with parallel activities such as 
feedback collection via telephone polls, real-time statis- 



tics on e-business activities, sales revenues etc. to bet- 
ter fine-tune the campaign. As an additional option the 
system owner can offer to provide anonymised data on 
the customers that viewed the advertising spot and/or 

5 target the advertising on a regional basis or other ano- 
nymised criteria to allow an even better fine-tuning of 
the advertising campaign - i n a sense extending the con- 
cept of a regional testmarket to the Internet with addi- 
tional criteria that are not regional, but targeted to cer- 

10 tain customer groups as testmarket. 

[0122] The Session Manager Application 14 runs reg- 
ularly (once per accounting step) and executes on all 
PPRs of active users. The operation of the Session 
Manager Application on an individual PPR is controlled 

15 by the Personal Control Field and the Dynamic Control 
Field. Active users are users that have started a session 
and not yet terminated it. Session start and session ter- 
mination is done by the RADIUS server on the same 
database. While the session is active, the Session Man- 

20 ager Application at each accounting step decrements 
the applicable accounts (in default mode the prepaid ac- 
count and the default profile account, in advertising 
mode the advertising-related accounts, in premium 
mode the Maximum Premium Time account and the 

25 Prepaid Account. In sponsor mode (which may coexist 
with the other modes) it also decrements the sponsor 
accounts (global or personal) and transfers the sponsor 
acccounting units to the beneficiary. 
[0123] The "Content and Policy Selection Portal" 30 

30 (PSP) is a user interface over which the user can change 
values in the personal user database - effectively chang- 
ing the user profile (and implicitly the service) during the 
usage session leading to the immediate or delayed start 
of a new part session with a new tariff and potentially a 

35 new accounting mode. This allows the user to change 
the accounting mode within a session, e.g. from ac- 
counting on a per minute basis to accounting on a"* per 
second basis. The user can recharge his prepaid ac- 
count using the PSP. The prepaid account can be 

40 charged and recharged by the user over all common 
payment methods (cash, bank debit, credit card, mobile 
card, telephone bill, etc.). Over the PSP the user can 
control to change his user profile with immediate effect, 
a fixed delay or bound to a certain event - including a 

45 quasi simultaneous tariff change. Via the PSP, the user 
can select the usage profile of the next part-session. Ex- 
amples for usage profiles are the following: 
[0124] Standard: unrestricted usage, Best Effort 
Service, no hacker-protection, no access to protected 

50 intranet areas without separate authorization, no adver- 
tising breaks that block other activities (basically corre- 
sponds to the most commonly used profiles today). 
[0125] Bronze: like Standard, but with tolerated ad- 
vertising breaks in certain intervals which block other ac- 

55 tivities during the advertising break. 

[0126] Silver: like Bronze, but with improved QoS 
(Quality of Service) e.g. with higher bandwidth to the 
backbone and in the backbone for this user by giving 
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the traffic of this user priority treatment relative to bronze 
service users and standard service users, or by giving 
absolute bandwidth guarantees. 
[0127] Gold: like Silver, but without interruption by ad- 
vertising breaks. 5 
[0128] Children: like Bronze, but with content filtering 
for unwanted content and only with advertising suitable 
to children. 

[0129] Secure Gold: like Gold, but with special net- 
work based firewall that protects against certain popular 
hacker methods (e.g. with anti-spoofing protection). 
[0130] IP-VPN/Intranet: unrestricted usage, potential- 
ly with Premium QoS via guaranteed bandwidth or Diff- 
Serv priorisation when accessing a corporate network, 
automatic membership without separate authorization. 
[0131] Advertising Block: for the duration of the ad- 
vertising block the usage is restricted to the consump- 
tion of advertising in a sequence of advertising spots, 
which can be dynamically changed (add: Voluntary ad- 
vertising viewing) 

[0132] Advertising spot company X: restricted usage 
(only certain IP addresses or web-servers hosting the 
advertising or a subset of these. Potentially in addition 
access to linked webpages of advertised products for 
direct e-business activities. 

[0133] Sponsored Site of company Y: restricted us- 
age limited to certain content or web-servers, e.g. free 
access for banking transactions with Bank Y which does 
not decrement the prepaid account as long as the user 
is accessing only sponsored content. As soon as the us- 
er is leaving the sponsored sector, i.e. starts an activity 
not covered under the sponsored user profile, he is be- 
ing warned that he is leaving the sponsored sector and 
that the default tariff will apply in the non-sponsored sec- 
tor from now on. Return to the sponsored sector is pos- 
sible via selection in the PSP. 

[0134] Sponsored by Company Z: limited usage, ac- 
cess only to company Z and to content that company Z 
is willing to sponsor. The prepaid-decrement is negative, 
as the company Z actually pays the user for accessing 
it's content. Company Z pays accordingly to the owner 
of the MPS. 

[0135] Prepaid-account depleted: there are two vari- 
ants how the depletion of a prepaid account can be han- 
dled: 

1 : The user will be disconnected immediately from 
the service and - where applicable (e.g. in dial-in 
scenarios) from the network as well. 

2: If the system owner has configured it in that way, 
the user can be given a last period of grace during 
which he is being warned of imminent disconnec- 
tion and be given a last chance to recharge his pre- 
paid account. His user profile will be limited to view- 
ing the warning of imminent disconnection and of 
recharging his prepaid account (website 32). If the 
last period of grace goes by without the account be- 



ing recharged, the user will be disconnected from 
the service and where applicable also from the net- 
work. 

[0136] Premium Content Gold allowed: usage al- 
lowed to all content including content classified as Gold, 
Silver and Bronze. Possible to access multiple contents 
of multiple classes in parallel. 

[0137] Premium Content Silver allowed: usage al- 
lowed to all content including content classified as Silver 
and Bronze. Possible to access multiple contents of 
multiple classes in parallel. 

[0138] Premium Content Bronze allowed: usage al- 
lowed to all content including content classified as 
Bronze. Possible to access multiple contents of multiple 
classes in parallel. 

[0139] Premium Content exclusive: usage limited to 
access Premium Websites of a certain content provider 
or a very specific content only, such as a baseball game, 
but no other content in parallel. The content provider 
may decide to allow access to related websites such as 
e-commerce sites related to the premium content (e.g.. 
DVD purchase of a film after viewing a streaming media 
preview). If the user initiates other activities he will be 
warned that he is trying to leave the exclusive premium 
content area and that he shall confirm he wants to return 
to the default service profile (or continue with premium 
content). 

[0140] At the beginning of a usage session the user 
is authorized with a certain profile, which is called his 
default profile. The user may be able to change his de- 
fault profile. The user will return to his default profile if 
he specifies a maximum time he likes to spent in a pre- 
mium rate profile. The user can select a new profile from 
a range of preconfigured profiles with the PSP 30 and 
start a new part-session anytime during the session. Us- 
er profiles are preconfigured in the NSS 20, so the com- 
munications between the PSP and the NSS only needs 
to communicate the selected profile in most cases ex- 
cept if a user policy requires additional parameters to 
be handed-over at instruction time. 
[0141] In conjunction with sponsoring, each user may 
have a Sponsoring Receiver Account that can be ac- 
cessed by the external B2B interface 34. This account 
can be increased by third parties (so-called "Simple 
Sponsors" such as advertisers in return for a "Page Im- 
pression" or a visit to a website of the advertiser. Alter- 
natively, the sponsor may have the ability to increase 
the prepaid account directly. 

[0142] Further, there may be provided a sponsoring 
interface with ability to change the user profile. This in- 
terface has access to the Prepaid Decrementor field 44 
in that way that the sponsor can decrease the value of 
the decrementor field (which is time dependent) and al- 
so potentially of a volume dependent decrementor field. 
If the decrementor becomes zero, this effectively repre- 
sents a full sponsoring of the service, effectively a "free" 
service paid by the sponsor. It is also possible to do a 
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part sponsoring. If the value of the decrementor be- 
comes negative, then the sponsor even goes further and 
pays acccounting units into the pockets of the user (Into 
his prepaid account at each accounting step, as the sub- 
traction of a negative value increases the prepaid ac- 5 
count). The sponsoring interface is allowed to change 
the user profile in return for the sponsoring during the 
sponsored part-session. As an example the sponsoring 
interface may force the user be able to access only cer- 
tain websites or use certain services while other web- 
sites or services are blocked for the duration of the spon- 
sored part-session. This feature allows to implement an 
effective advertising financing method with the imple- 
mentation of advertising breaks which resemble the 
business model of the free-TV. 

[01 43] If the user is trying to leave a sponsored sector, 
i.e. if he is violating the policy set on behalf of the spon- 
sor in exchange for sponsoring, he Is directed to a Spon- 
sor-Exit Website. Here, the user gets warned that he is 
leaving sponsored sector and gets a choice to continue 
in the sponsored sector or will be forwarded to the Policy 
Selection Portal 30. 

[01 44] Optionally, there may further be provided an e- 
Business Transactions Interface (B2B interface), which 
the user can use for payment at other websites such as 
auction sites or barter sites. The payment or barter or 
exchange or auction or donation transaction may be ex- 
ecuted in any of the acccounting units except time and 
unit value 1 . This may be used for microtransactions (e. 
g. micropayment, microbarter, microauction, microex- 
change, microdonation). A sponsor could specify that 1 
M PS-unit (e.g. one prepaid-mile) will be donated with 
every advertising spot viewed to a third party such as a 
non-government organization like Greenpeace. When 
viewing or otherwise consuming premium content, such 
as music, the viewer can have an option to donate di- 
rectly to the artist who created the viewed or otherwise 
consumed intellectual property. This interface can also 
be used to influence the value of acccounting units via 
dynamic conversion tables. 

[0145] To give an impression, how the system de- 
scribed above may appear from the viewpoint of the us- 
er, Fig. 5 illustrates an example of a user screen 82. As 
usual, the main part of the screen is occupied by the 
web page 84, which the user is currently visiting. In the 
example shown, it is assumed that this web page 84 is 
a page that is sponsored by a company XY. Below the 
web page 84, a message 86 informs the user about the 
service profile he is currently using. In the present case, 
the message 86 says: "Sponsored by company XY". 
Thus, the user is informed that he watches the web page 
84 at a reduced price or even cost-free. Optionally, the 
current tariff may be indicated as well. 
[01 46] A button 88 "Change Profile" can be clicked by 
the user if he wants to switch to another service profile. 
Then, the user will be directed to the Content and Policy 
Selection Portal 30 shown in Fig. 1 . 
[0147] Another button 90 "View Accounts" permits the 



user to check the current status of his prepaid account 
and any possible other accounts. The information made 
available in this way is updated essentially in real-time, 
i.e. after each accounting step interval. 
[0148] A message 92 indicates the current tariff, and 
a number of buttons 94 provide short-cuts for quickly 
changing to other profiles such as "Privacy", "Account- 
ability", "Gold" and "Silver". 



10 

Claims 

1. Method of providing telecommunications servic- 
es, wherein users are authenticated and authorized 

is to a first service profile before a user session starts, 
characterized in that the service profile is dynam- 
ically varied in the course of the session. 

2. Method according to claim 1 , wherein the service 
20 profile is dynamically varied by selecting one of a 

plurality of predefined service profiles. 

3. Method according to claim 1 or 2, wherein the 
service profile is changed in response to a com- 

25 mand entered by the user. 

4. Method according to claim 1 or 2, wherein the 
service profile is changed by changing at least one 
parameter out of a plural iy of parameters specifying 

30 said profile. 

5. Method according to any of the preceding claims, 
wherein the service profile is changed in response 
to a command that is generated automatically in the 

35 network control system after the (apse of a prede- 
termined time interval or in response to the occur- 
rence of a predetermined event. 

6. Method according to claim 5, wherein the event 
40 causing an automatic change of the service profile 

is the depletion of an account in a personal record 
of the user. 

7. Method according to claim 5 or 6, wherein one of 
45 the service profiles restricts the access of the user 

to advertising information. 

8. Method according to any of the preceding claims, 
wherein accounts of the users are changed in a se- 

50 quence of accounting steps that are performed in 
regular intervals. 

9. Method according to claim 8, wherein user 
records stored in a personal user data base each 

55 include a prepaid account and a decrementor field 
specifying the amount of accounting units that is 
subtracted from the prepaid account in each ac- 
counting step, and wherein the contents of the dec- 
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rementor field are changed in accordance with the 
service profile. 

10. Method according to claim 9, wherein the con- 
tents of the decrementor field are updated in each 5 
accounting step interval, depending on the services 
that have been rendered in the past interval. 

11. Method according to any of the preceding 
claims, wherein users consume network services in 10 
the form of service units having each a specific val- 
ue that is expressed in accounting units, each user 
has at least one account that is incremented or dec- 
remented essentially in real-time and in accordance 
with the service units being consumed, character- is 
ized by transactions in which a positive or negative 
amount of accounting units is transferred from an 
account of a user to another account. 

12. Method according to claim 11 , wherein the ac- 20 
counts of the users are changed only in the form of 
transactions in which an amount of accounting units 

is transferred from one account to another, so that 
the total sum over all accounts remains constant. 

25 

13. Method according claim 11 or 12, wherein global 
accounts are provided in addition to personal ac- 
counts of each user, and, in a privacy mode, trans- 
actions consist of transferring accounting units from 

a personal account of a user to one or more global 30 
accounts. 

14. Method according to any of the claims 11 to 13, 
wherein, in an accountability mode, transactions 
consist of transferring accounting units only from 35 
one account of the user to another account of the 
same user. 

15. Method according to any of the claims 11 to 14, 
comprising a step of displaying the current status of 40 
an account of the user on a user's display screen. 

16. Method according to any of the claims 11 to 15, 
comprising a step of displaying a tariff, that is 
charged for the current service, on a user's display 45 
screen. 

17. Method according to any of the preceding 
claims, comprising a step of displaying a service 
profile indication identifying the service profile cur- so 
rently being used by a user on a user's display 
screen. 

18. Control system for a telecommunications net- 
work, comprising a decision logic wh ich, when a us- 55 
er has been authenticated for a session, checks 
throughout the session whether a predetermined 
event has occurred, which requires a change of a 



service profile, and changes the service profile in 
response thereto. 

19. Control system for a telecommunications net- 
work, comprising a user database storing, for each 
user, at least one account and a decrementor field, 
the system further comprising an accounting logic 
for updating in regular accounting step intervals of 
not more than one minute the accounts of all users 
presently authenticated to a network service, 
wherein updating includes a step of subtracting the 
contents of the decrementor field of the user from 
the account of the same user, said accountig logic 
being arranged for dynamically changing the con- 
tents of the decrementor fields of the authenticated 
users. 

19. Control system for a telecommunications net- 
work, comprising a user database storing, for each 
user, at least one account and a decrementor field, 
the system further comprising an accounting logic 
for updating in regular accounting step intervals of 
not more than one minute the accounts of all users 
presently authenticated to a network service, 
wherein updating includes a step of subtracting the 
contents of the decrementor field of the user from 
the account of the same user, said accountig logic 
being arranged for subtracting an amount from an 
account of a user and adding this amount in the 
same accountig step to one of another account of 
the same user, an account of another user or a glo- 
bal account that is not assigned to a specific user. 
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